Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: UCgs8zncQIeNKHt4rhr4c/25uYzpICbC5wEpJjNVABY=
Subject key identifier: 09:4E:0B:B9:9D:A1:B6:DE:5C:15:56:71:45:90:74:13:5C:CA:06:39
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 019D265F89F0CA4C64FCBBB79EB70A05EB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: LAt1Vg64pT7xYbZPLyxCAK6SCzUfLI50sJiQGetCu9g=)
2: YIADlJEaOqXbDe848xRwPpNrR2E.roa (hash: GAf0RBlCvyX7yioFoOVmfF//A2GhSK/l+zTEgxM3/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:89:f0:ca:4c:64:fc:bb:b7:9e:b7:0a:05:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=094e0bb99da1b6de5c155671459074135cca0639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:95:8e:ef:e7:64:8d:8d:7e:d9:c6:39:48:
30:80:1e:b1:31:3a:9f:42:b5:48:95:b2:74:16:1a:
0f:29:c1:57:01:3e:65:9a:c8:23:ac:3d:5a:bd:32:
05:37:2e:da:3d:4f:ec:11:d7:6e:39:dd:4f:90:a0:
72:82:ec:bc:ef:66:55:74:2e:d9:fd:43:86:a7:13:
9b:2c:b1:4e:6f:7f:18:7b:5f:cb:40:94:3a:52:e3:
de:bd:62:fa:a7:d4:22:42:2c:6d:3a:2e:b1:d7:dc:
23:bc:2e:0f:03:3b:83:f7:08:b0:8d:30:ef:f9:10:
97:6e:b4:b9:df:3d:93:c4:64:58:19:74:4b:f8:ef:
bf:53:db:4f:eb:c1:a1:ab:8b:80:1c:35:6a:b2:90:
ef:52:2b:85:be:16:a1:98:1a:c6:f5:d3:c7:75:63:
d0:48:d1:15:1e:59:6f:14:dc:79:f4:66:dd:80:73:
98:da:10:a9:1c:76:9f:4e:58:75:e2:96:37:eb:09:
0a:5b:e1:ff:28:8d:c8:a8:38:53:12:c0:f4:e7:95:
09:0a:cd:cf:b1:25:86:ca:f3:89:30:d2:fe:68:c3:
d9:9c:49:a6:b3:76:0c:55:60:a0:2f:ec:bf:ea:25:
23:64:25:91:d7:1f:fa:35:74:27:91:09:ce:89:2d:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:0B:B9:9D:A1:B6:DE:5C:15:56:71:45:90:74:13:5C:CA:06:39
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:57:f8:31:e8:17:c0:21:73:98:34:af:ed:a9:b0:dd:03:97:
b1:b9:01:27:b5:f8:be:90:2b:cf:51:da:ee:1a:c3:2e:15:e9:
1a:9f:0c:51:a9:a9:23:15:63:aa:8e:bb:ac:57:29:f3:69:d6:
6e:96:fc:ba:f0:88:9f:0b:aa:c5:c9:40:aa:9e:55:ca:3f:6d:
9e:75:01:5c:82:fa:9d:85:a1:37:9d:e0:e3:f8:f5:4b:c0:c2:
87:a4:6d:08:ee:12:ed:c2:c7:86:a0:ce:63:9c:1f:3f:0a:c2:
a4:4e:3f:71:65:d1:3c:21:dc:3b:4b:6e:40:9d:f3:53:86:3a:
05:67:1f:3d:b0:15:9d:48:96:6b:39:2a:7e:73:fd:90:e9:85:
b7:67:5b:42:13:ac:f4:b0:63:a1:61:63:e4:c7:cd:88:be:d0:
e1:6d:1d:a4:be:ee:a4:e1:20:67:fa:97:ee:04:a9:3b:af:06:
63:2b:6d:b9:94:78:8e:2d:f2:09:d2:96:a9:b8:05:c7:5e:21:
47:dc:30:bb:2b:b8:2f:a1:cd:ed:74:2a:48:38:bb:2b:4b:b2:
2e:b0:41:0a:c1:1d:b1:5f:bb:c1:f8:02:b8:15:ce:2f:a9:36:
5a:09:71:dc:cc:e0:48:04:42:19:39:63:06:9d:a5:36:c0:4a:
db:ae:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:40 2026 by rpki-client